Skip to content

Commit fb5ddfa

Browse files
anaconda_gitpython_GHSA-2mqj-m65w-jghx patch vulnerability (#990)
1 parent dfef842 commit fb5ddfa

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

src/anaconda/.devcontainer/Dockerfile

+3-1
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,9 @@ RUN python3 -m pip install --upgrade \
3737
# https://github.com/advisories/GHSA-5h86-8mv2-jq9f
3838
aiohttp==3.9.2 \
3939
# https://github.com/advisories/GHSA-6vqw-3v5j-54x4
40-
cryptography==42.0.4
40+
cryptography==42.0.4 \
41+
# https://github.com/advisories/GHSA-2mqj-m65w-jghx
42+
gitpython==3.1.41
4143

4244
# Reset and copy updated files with updated privs to keep image size down
4345
FROM mcr.microsoft.com/devcontainers/base:1-bullseye

src/anaconda/test-project/test.sh

+1
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ checkPythonPackageVersion "tornado" "6.3.3"
4949
checkPythonPackageVersion "pyarrow" "14.0.1"
5050
checkPythonPackageVersion "pillow" "10.2.0"
5151
checkPythonPackageVersion "jupyterlab" "4.0.11"
52+
checkPythonPackageVersion "gitpython" "3.1.41"
5253

5354
checkCondaPackageVersion "pyopenssl" "23.2.0"
5455
checkCondaPackageVersion "requests" "2.31.0"

0 commit comments

Comments
 (0)